CVE-2024-6121

CVE-2024-6121 involves NI SystemLink Server shipping an outdated Redis version (affecting NI SystemLink Server 2024 Q1 and earlier; NI FlexLogger 2023 Q2 and earlier). Connected sources confirm CVE-2022-24834 and other Redis flaws; the security issue arises from Lua scripting in Redis, leading to...

CVE-2022-27237

CVE-2022-27237 describes a cross-site scripting (XSS) vulnerability in an NI Web Server component used with several NI products. The advisory indicates the affected surface is the NI Web Server component across multiple NI product deployments, with remediation guidance requiring upgrading to one ...

CVE-2023-5136

The connected advisories confirm a vulnerability in NI DIAdem GPX processing via the TopoGrafix DataPlugin for GPX. The root cause is an XML External Entity (XXE) handling flaw that allows a crafted GPX file to cause the XML parser to fetch and embed external content, leading to information discl...

CVE-2025-2449

CVE-2025-2449 concerns NI FlexLogger, specifically the usiReg URI file parsing component. The vulnerability arises from insufficient validation of a user-supplied path before file operations, enabling a path traversal that can lead to remote code execution in the context of the current user. Expl...

CVE-2024-6122

CVE-2024-6122 describes an incorrect installation-directory permission in the shared NI SystemLink Server KeyValueDatabase service that may allow local information disclosure. Affected: NI SystemLink Server versions prior to 2024 Q1 and NI FlexLogger prior to 2023 Q2 (those that installed the sha...